1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 15:37:19 +00:00
Commit graph

3420 commits

Author SHA1 Message Date
Arsh Sharma
97eaa7e854
adding any/all under match and exclude blocks (#2130)
* intial commit

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* update types

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* updated all type

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* extract to single struct

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* updated match resource description function

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* minor test working

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* match resources test is working

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* exclude resources test is working

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* changed double negetive in logic

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* yamls updated and added validation and cache loops

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* match exclude working but need to fix matchExcludeConflict function

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* restored doMatchAndExcludeConflict function

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* rewrote the matchExcludeConflictFunction

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* finalizing completed till utils_test.go

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* ready for review complete

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* update yamls

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* one more merge conflict solved

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* regenerates YAMLs

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* possible fix for failing tests

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed duplicate any/all logic and added a test, (rest refacotring is in progress)

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* cache test is working

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* improved cache test and it is working

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added check for mutate and generate policies too

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* cleaned doesResourceMatchConditionBlock logic but validation still has code from attempt to combine the all block

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* reverted validate.go to older logic

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed commented code

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed extra comments

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-07-28 12:59:53 -07:00
Vyankatesh Kudtarkar
a3dfe3c647
Merge pull request #2202 from NoSkillGirl/bug/2197_CLI_issue
CLI result varies if multiple resources are passed for a policy with `request.operation`
2021-07-28 22:50:43 +05:30
Max Goncharenko
903963c26d
add special variable substitution logic for preconditions (#1930)
* add special variable substitution logic for preconditions

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* handle NotFoundVariable error in proper way

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* remove excess log; fix grammar

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* removed isPrecondition flag; added test case for empty deny string; fixed related issue

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix test case

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix go lint

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix tests

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
2021-07-28 09:54:50 -07:00
Vyankatesh Kudtarkar
64b6e22042
fix test command issue 2021-07-28 22:12:01 +05:30
NoSkillGirl
be8c584037 fixed test case
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-28 11:06:28 +05:30
NoSkillGirl
07497cd7e7 moved position of logic to check operation is delete or not
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-28 10:52:32 +05:30
shuting
4c99b51fb7
Remove GitHub Releaser & Add app version in Helm notes (#2191)
* - remove github releaser
- add app version in Helm notes

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update chart var

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-27 10:28:28 -07:00
vivek kumar sahu
749854c589
Allow running e2e tests on local (dev) cluster (#2190)
* Added test-e2e-local in the Makefile

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* Added a proper Indentation

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
2021-07-26 23:49:28 -07:00
Shuting Zhao
d3e47b8e48 taf v1.4.2-rc1
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-23 14:43:28 -07:00
Ahmed Waleed Malik
a0bac26308
Add servicemonitor in helm chart (#1984) 2021-07-23 12:33:05 -07:00
Zadkiel
61381cd648
fix: add templating variable for Datasource field (#2187) 2021-07-23 12:10:08 -07:00
Pooja Singh
88d1617390
Resolving variables from the resource passed | CLI (#2180)
* added logic for adding resources in context

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* returning error if request.object is passed from cmd

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* reterning error if request.object is passed from value file

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removing comments

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* handling context for delete operation

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small fix for test command

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-23 11:32:48 -07:00
Max Goncharenko
4c7ca97eac
Patch strategic merge preprocessing: implement anchor handling (#2156)
* finished walkMap

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* added validation to the patchStrategicMerge

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* finished fixing tests

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fixed part of old tests

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* patchStrategicMerge anchor preprocessing is finished

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix #1915 and #1896

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix lint errors

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* removed debug logs

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* added failing test

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* Fix unnecessary deletion

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
2021-07-23 10:53:37 -07:00
Yashvardhan Kukreja
0a38f1c8ec
dealt with cardinality explosion (#2157) 2021-07-23 09:16:50 -07:00
Vyankatesh Kudtarkar
8c69ce3ea5
Merge pull request #2184 from realshuting/bugfixes/2094-mutate-crd
Update JSON context with patched resource for chained mutate rules
2021-07-23 13:44:58 +05:30
Shuting Zhao
882c826c7d fix linter issue
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-22 14:37:09 -07:00
Shuting Zhao
e3ba38b165 update JSON context with patched resource for chained mutate rules
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-22 14:23:03 -07:00
Pooja Singh
acc9f6652d
Merge pull request #2178 from NoSkillGirl/bug/2126_external_metrics
moving to error info log for external.metrics.k8s.io/v1beta1
2021-07-21 17:49:25 +05:30
NoSkillGirl
c4ee793c2c moving to error info log
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-21 13:39:07 +05:30
Vyankatesh Kudtarkar
bf84b71602
Merge pull request #2176 from vyankyGH/bug/clean-log
Bug/clean log
2021-07-21 13:08:19 +05:30
Vyankatesh Kudtarkar
437d511099 Clean log 2021-07-21 12:10:52 +05:30
Vyankatesh Kudtarkar
4993e69c5b Revert "clean log"
This reverts commit e5b02ee526.
2021-07-21 12:04:46 +05:30
Vyankatesh Kudtarkar
e5b02ee526 clean log 2021-07-21 12:02:14 +05:30
Jim Bugwadia
0b30aea330
Merge pull request #2172 from kyverno/2171_optimize_image_verify_checks
2171 optimize image verify checks
2021-07-20 22:47:59 -07:00
Jim Bugwadia
067760cfdc merge main
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-20 21:52:35 -07:00
Jim Bugwadia
38b3730c7f Merge branch 'main' into 2171_optimize_image_verify_checks 2021-07-20 21:50:10 -07:00
Jim Bugwadia
7e053cccd7 Merge branch 'main' of https://github.com/kyverno/kyverno into main 2021-07-20 21:49:53 -07:00
shuting
b2515fa9eb
Add default image registry to patched resource (#2166) 2021-07-20 21:20:37 -07:00
Jim Bugwadia
e4a311211b fmt and improve error messages
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-20 20:28:11 -07:00
georgekaz
c73a14eba2
add tests before release (#2174)
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-20 17:06:56 -07:00
shuting
3de6128147
Bugfixes/helm release (#2173)
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 12:49:37 -07:00
Jim Bugwadia
30567be782 check for changes
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-20 09:36:12 -07:00
Jim Bugwadia
78e04d0ec0 fix test log
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-20 09:32:35 -07:00
Jim Bugwadia
e18e7fc443 fix typo
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-20 09:31:52 -07:00
Jim Bugwadia
1fdb49e47a fix typo
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-20 09:29:58 -07:00
shuting
2de0af635e
Bump Helm version (#2167)
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 00:15:33 -07:00
georgekaz
216a4e13bf
Fix helm-release workflow (#2150)
* add checkout step to helm releaser.

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

Increment version

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* disable version check, revert version no. to last released

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-19 13:01:17 -07:00
Max Goncharenko
0fdd349849
Changed error to info for NotFoundError in jsonContext (#2140)
* changed error to info for NotFoundError in jsonContext

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* raise log level for NotFoundError in jsonContext

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
2021-07-14 14:50:28 -07:00
Jim Bugwadia
003c865ab9
deprecate policy status (#2136)
* deprecate policy status

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* make fmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove policy status tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix generate metrics

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2021-07-14 12:18:59 -07:00
georgekaz
b9e77575be
Chart changes merged,not deployed,iterate version (#2111)
* Chart changes merged,not deployed,iterate version

kyverno#2073 - Updates chart version to v1.4.2 - merged 13 days ago but not deployed
kyverno#2081 - Fix Helm release during tag - merged 9 days ago
kyverno#2037 - updated chart contents but not chart version - not released - merged 7 days ago
kyverno#2103 - updated chart contents but not chart version - not released - merged 3 hours ago

Status - main branch shows chart version is v1.4.2, git tag is v1.4.1 and latest helm chart on artifacthub.io/packages/helm/kyverno/kyverno is v1.4.1

This PR just iterates the chart version so that it's built, but I think chart versions should be incremented as part of the normal PR/merge process if chart elements are changed

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* break the helm release out into it's own workflows

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* workflow fixes

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* don't run helm-release on PR. Remove git config bit

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-14 12:10:41 -07:00
Vyankatesh Kudtarkar
b1861081be
support for Disallow pod exec operation (#2138) 2021-07-14 11:42:10 -07:00
Vyankatesh Kudtarkar
081cca8f23
Fix wildcards issue for match/exclude kind block (#2137)
* Fix wildcards issue for match/exclude kind block

* fix typo
2021-07-14 11:19:15 -07:00
shuting
104cd310e8
Cleanup Report Change Requests (#2134)
* clean up RCRs if retry fails

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* cleanup report change request when background scan starts

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add verb deletecollection to ClusterRole kyverno:customresources

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-14 09:57:16 -07:00
Vyankatesh Kudtarkar
521ee0e683
remove duplicate (#2132) 2021-07-13 10:29:48 -07:00
Jim Bugwadia
13caaed8b7
Feature/cosign (#2078)
* add image verification

* inline policy list

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* cosign version and dependencies updates

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add registry initialization

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* generate deep copy and other fixtures

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix deep copy issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* mutate images to add digest

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add certificates to Kyverno container for HTTPS lookups

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align flag syntax

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update docs

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* patch image with digest and fix checks

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* hardcode image for demos

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add default registry (docker.io) before calling reference.Parse

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix definition

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase webhook timeout

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix args

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* run gofmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rename for clarity

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix HasImageVerify check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix linter error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle API conflict and retry

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix reviewdog issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix make for unit tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* improve error message

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix durations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle errors in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* print policy name

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add retries and duration to error log

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix time check in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* round creation times in test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix retry loop

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove timing check for policy creation

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix e2e error - policy not found

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update string comparison method

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix test Generate_Namespace_Label_Actions

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug info for e2e tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix generate bug

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add check for update operations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase time for deleteing a resource

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Shuting Zhao <shutting06@gmail.com>
2021-07-09 18:01:46 -07:00
Pooja Singh
20ac2a6556
Merge pull request #2112 from realshuting/bugfixes/inconsistent-polr
Fix inconsistent polr for audit policy
2021-07-09 18:12:46 +05:30
shuting
6afe86c54e
Apply pod's rules if the owner is not k8s pod-controllers (#2107)
* apply pod's rules if the owner is not k8s pod-controllers

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add unit tests

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-09 14:44:38 +05:30
Shuting Zhao
5fdec77c6c fix inconsistent polr for audit policy
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-08 18:51:31 -07:00
Vyankatesh Kudtarkar
66aa4d0e4f
fix Helmchart doesn't respect metricsService.create flag (#2103) 2021-07-08 12:12:34 -07:00
Vyankatesh Kudtarkar
7342675a1e
Merge pull request #2102 from ercpereda/add-topologySpreadConstraints-to-helm-chart
Add topologySpreadConstraints to helm charts
2021-07-07 22:34:40 +05:30